Adoption

Agent Skills are supported by leading AI development tools.

VS Code Gemini CLI GitHub Goose Amp Cursor Claude Code Letta OpenCode Claude OpenAI Codex Factory VS Code Gemini CLI GitHub Goose Amp Cursor Claude Code Letta OpenCode Claude OpenAI Codex Factory

steipete/clickclack

Name: clickclack
Author: steipete

skills/clickclack/SKILL.md

npx skillsauth add steipete/agent-scripts clickclack

Clean

TrivyContainer and dependency vulnerability scanner

Clean

SemgrepStatic code analysis for vulnerabilities

Clean

mcp-scan (Snyk)Model Context Protocol security validation

Skipped

Snyk (dep)Open source security scanning

Skipped

Socket.devSupply chain security analysis

Skipped

VirusTotalMulti-engine malware detection

Skipped

CrowdStrikeAdvanced threat intelligence

Skipped

OSV-ScannerOpen Source Vulnerability database check

Skipped

OWASP Dep-Check

ClickClack

Use this for ClickClack product/runtime ops, deploys, hosted app checks, and domain questions.

What

Repo: ~/Projects/clickclack / https://github.com/openclaw/clickclack
Product: self-hostable Slack-style chat for OpenClaw/community/agent workflows.
Surfaces:
- https://clickclack.chat product site (Cloudflare Worker custom domain)
- https://www.clickclack.chat (Worker custom domain, same worker)
- https://app.clickclack.chat hosted app (Worker custom domain)
- https://docs.clickclack.chat GitHub Pages docs from docs/

Prod (Cloudflare, since 2026-07-05)

Everything is one Cloudflare Worker clickclack in the OpenClaw account (91b59577e757131d68d55a471fe32aca) fronting a Cloudflare Container.
Worker + container config: wrangler.jsonc (routes are declarative custom_domain entries).
Container: Go binary + embedded SPA from Dockerfile.cloudflare; data in Supabase Postgres (CLICKCLACK_DB secret) and R2 uploads (clickclack-uploads).
Zone clickclack.chat id e7f93ba1ec24d75ce60c468bbaba5cb5 (OpenClaw account). docs CNAME → openclaw.github.io stays DNS-only.
1Password (OpenClaw vault): "Cloudflare ClickClack deploy token" (api_token field, workers-scoped; no DNS edit), "Cloudflare ClickClack R2 uploads".
Legacy Hetzner box clickclack-prod-01 (157.90.237.80) no longer serves any DNS; decommission when confident. Old runbook in git history of this file.

Deploy

cd ~/Projects/clickclack && git pull --ff-only
Docker must run (OrbStack: open -a OrbStack).
pnpm deploy:cloudflare (auth: wrangler login OAuth or the 1Password deploy token as CLOUDFLARE_API_TOKEN).
Rollout gotcha: the running container instance is NOT replaced while it has traffic; sleepAfter=10m never fires on a public site. Bump CLICKCLACK_CONTAINER_NAME in wrangler.jsonc (dated, e.g. prod-YYYYMMDD-open-org) and redeploy to force a fresh instance on the new image. Container is stateless (Postgres/R2), so the swap is safe.
Commit the wrangler.jsonc bump.

Verify

curl -s https://clickclack.chat/ | grep -oE 'entry/app\.[A-Za-z0-9_-]+\.js' — hash must match the freshly deployed build (compare against https://clickclack.services-91b.workers.dev).
Same check for https://app.clickclack.chat and https://www.clickclack.chat.
pnpm exec wrangler containers info a03b3158-bcfd-4962-9a86-e75489f4e803 — health + image digest.
curl -I https://docs.clickclack.chat

Guardrails

Do not print OAuth secrets or magic tokens.
The deploy token has no DNS scope; DNS record changes need the dashboard or a Zone.DNS token.
Keep deploys from clean git checkouts, not dirty working trees.

steipete/clickclack

skills/clickclack/SKILL.md

ClickClack ops: chat app, Cloudflare Workers deploy, DNS/docs/app, container rollout.

5,248 stars

tools

Updated Jul 6, 2026

$ install --global

skillsauth

npx skillsauth add steipete/agent-scripts clickclack

Install this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.

Security Scan Results

3 of 9 scanners reported clean

Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.

Scanners Passed

Scanners in report

Clean

TrivyContainer and dependency vulnerability scanner

95%

Clean

SemgrepStatic code analysis for vulnerabilities

95%

Clean

mcp-scan (Snyk)Model Context Protocol security validation

95%

Skipped

Snyk (dep)Open source security scanning

50%

Skipped

Socket.devSupply chain security analysis

50%

Skipped

VirusTotalMulti-engine malware detection

50%

Skipped

CrowdStrikeAdvanced threat intelligence

50%

Skipped

OSV-ScannerOpen Source Vulnerability database check

50%

Skipped

OWASP Dep-Check

50%

Last scanned: Jul 6, 2026, 4:30 AM159.5s2 files scanned

SKILL.md

name:: clickclack
description:: ClickClack ops: chat app, Cloudflare Workers deploy, DNS/docs/app, container rollout.

ClickClack

Use this for ClickClack product/runtime ops, deploys, hosted app checks, and domain questions.

What

Repo: ~/Projects/clickclack / https://github.com/openclaw/clickclack
Product: self-hostable Slack-style chat for OpenClaw/community/agent workflows.
Surfaces:
- https://clickclack.chat product site (Cloudflare Worker custom domain)
- https://www.clickclack.chat (Worker custom domain, same worker)
- https://app.clickclack.chat hosted app (Worker custom domain)
- https://docs.clickclack.chat GitHub Pages docs from docs/

Prod (Cloudflare, since 2026-07-05)

Everything is one Cloudflare Worker clickclack in the OpenClaw account (91b59577e757131d68d55a471fe32aca) fronting a Cloudflare Container.
Worker + container config: wrangler.jsonc (routes are declarative custom_domain entries).
Container: Go binary + embedded SPA from Dockerfile.cloudflare; data in Supabase Postgres (CLICKCLACK_DB secret) and R2 uploads (clickclack-uploads).
Zone clickclack.chat id e7f93ba1ec24d75ce60c468bbaba5cb5 (OpenClaw account). docs CNAME → openclaw.github.io stays DNS-only.
1Password (OpenClaw vault): "Cloudflare ClickClack deploy token" (api_token field, workers-scoped; no DNS edit), "Cloudflare ClickClack R2 uploads".
Legacy Hetzner box clickclack-prod-01 (157.90.237.80) no longer serves any DNS; decommission when confident. Old runbook in git history of this file.

Deploy

cd ~/Projects/clickclack && git pull --ff-only
Docker must run (OrbStack: open -a OrbStack).
pnpm deploy:cloudflare (auth: wrangler login OAuth or the 1Password deploy token as CLOUDFLARE_API_TOKEN).
Rollout gotcha: the running container instance is NOT replaced while it has traffic; sleepAfter=10m never fires on a public site. Bump CLICKCLACK_CONTAINER_NAME in wrangler.jsonc (dated, e.g. prod-YYYYMMDD-open-org) and redeploy to force a fresh instance on the new image. Container is stateless (Postgres/R2), so the swap is safe.
Commit the wrangler.jsonc bump.

Verify

curl -s https://clickclack.chat/ | grep -oE 'entry/app\.[A-Za-z0-9_-]+\.js' — hash must match the freshly deployed build (compare against https://clickclack.services-91b.workers.dev).
Same check for https://app.clickclack.chat and https://www.clickclack.chat.
pnpm exec wrangler containers info a03b3158-bcfd-4962-9a86-e75489f4e803 — health + image digest.
curl -I https://docs.clickclack.chat

Guardrails

Do not print OAuth secrets or magic tokens.
The deploy token has no DNS scope; DNS record changes need the dashboard or a Zone.DNS token.
Keep deploys from clean git checkouts, not dirty working trees.

Related Skills

steipete/codex-first

tools

VerifiedTrustedCommunity

Claude Code-only work routing: delegate implementation, fixing, exploratory subagents, rebasing, and PR merging/landing to Codex CLI while Claude specifies, decides, reviews, and verifies. Direct hands-on delegation requires ANTHROPIC_BASE_URL to be unset or neither loopback nor gorillaclaw.sheep-coho.ts.net. Codex-backed autoreview is always allowed and preferred, independent of environment.

6,450SKILL.mdUpdated Jul 7, 2026

steipete/codex-huge-context

development

VerifiedTrustedCommunity

Codex 1M context: direct OpenAI Responses API inference, safe Sol/Terra/Luna input headroom, Keychain delivery, and Mac fleet rollout.

6,441SKILL.mdUpdated Jul 20, 2026

steipete/codex-huge-context

steipete/remote-mac

data-ai

VerifiedTrustedCommunity

Remote Macs: MacBook, Mac Studio, clawmac, megaclaw, Tailscale, SSH, OpenClaw.

6,428SKILL.mdUpdated May 9, 2026

steipete/one-password

development

VerifiedTrustedCommunity

REQUIRED before ANY `op` command or whenever a task needs an API key, token, password, credential, or secret (OPENAI_API_KEY, ANTHROPIC_API_KEY, deploy tokens, live-test keys). Prompt-free 1Password service-account reads; wrong invocations spam macOS dialogs.

6,428SKILL.mdUpdated May 8, 2026

steipete/one-password

Download

For Claude Desktop. Download once, then upload the file in the app — no terminal needed.

Need help? View full Cowork setup guide →

Install manually

Choose your platform

# Clone the repo
git clone https://github.com/steipete/agent-scripts.git

# Copy into Claude Code skills folder (global)
cp -r agent-scripts/skills/clickclack ~/.claude/skills/

Claude Code Skills — official skills path docs.

Repository

steipete/agent-scripts

5,248 stars

Compatible with

Claude Code

OpenAI Codex CLI

ChatGPT